$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft File: BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json) Hash identifier: 8nr0I913OIqJEnRG51wWH9LadnVKjROC52YbhcDfaNM= Subject key identifier: 60:E8:0A:54:01:66:ED:5C:53:31:20:2D:42:18:51:1E:3A:A9:14:34 Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Certificate serial: 1315 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft Manifest number: 12FD Signing time: Tue 24 Mar 2026 16:55:30 +0000 Manifest this update: Tue 24 Mar 2026 16:55:29 +0000 Manifest next update: Tue 31 Mar 2026 16:55:29 +0000 Files and hashes: 1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: WuuRI6NSULL526B8KIxyuQVvKYovH0Vaur36SXloIfo=) 2: 3489528EC84511ED90A61540C4F9AE02.roa (hash: IAHu/i87YCurf7TsutZ4NJzzxkW8+ff7z519ukOdfYo=) 3: 35615A30C84511ED90A61540C4F9AE02.roa (hash: ikwRwX6HznSAvB0gllaQ7OaCqCsraBq8/S0KLelO+q8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4885 (0x1315) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Validity Not Before: Mar 24 16:55:29 2026 GMT Not After : Mar 31 16:55:29 2026 GMT Subject: CN=69c2c202-e389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b4:07:3b:60:45:29:6e:2f:0b:09:ac:e3:70: 55:5a:57:c5:29:c7:f8:8f:1d:05:a1:ce:94:33:81: 02:ff:cc:19:e1:e3:2a:3e:a9:31:d4:70:ff:81:f8: 91:47:09:59:41:58:c2:ae:f9:06:70:ef:de:6d:3a: 31:d8:62:8a:da:8e:e4:03:d6:4a:0e:c7:fe:8c:1d: 99:cf:b6:47:c0:7a:4d:95:92:48:21:06:91:d7:f6: 3f:7e:e1:fc:c4:26:f0:49:94:02:b9:f3:7d:84:fe: b3:8c:55:75:8f:a6:bc:dd:8c:12:6e:3d:bc:a9:d6: 9a:10:85:30:40:aa:af:63:1d:3d:c1:2c:28:bb:ae: 03:be:ef:2f:0b:fb:54:80:93:f6:30:2b:b5:84:35: 22:ae:bf:82:66:ed:e9:a5:a8:47:92:ae:1d:99:5d: 52:06:d5:ed:cb:38:96:bb:34:80:bc:23:4f:30:6c: 27:82:40:c6:99:21:42:d9:43:91:74:af:bd:80:bf: 5f:71:dd:85:39:c4:ab:ce:fc:b2:a5:da:89:7c:47: d9:e3:9d:64:2b:0f:0e:57:14:59:c9:7f:76:5c:56: 9d:78:d1:73:e9:3c:ea:94:be:6d:32:6d:55:b7:84: 18:85:dd:f7:4f:ea:98:75:f9:37:60:c4:ee:b2:69: 41:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E8:0A:54:01:66:ED:5C:53:31:20:2D:42:18:51:1E:3A:A9:14:34 X509v3 Authority Key Identifier: keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:e6:34:70:c1:6d:9c:c0:46:6c:13:78:75:d9:bd:fb:99:ab: 1a:2f:99:8e:51:73:c0:18:a7:f6:eb:1a:77:c9:62:2f:c1:61: 7a:28:cc:28:79:2a:2e:c8:4b:08:bd:9a:37:03:6b:04:a9:7d: 9b:b4:34:1b:e5:c1:3b:b8:2c:1f:93:17:08:15:75:be:41:01: 2c:8d:5f:7b:fe:3c:31:93:61:92:c9:e0:5a:46:5e:cf:50:96: 17:59:e5:2a:b8:28:9a:85:9c:a5:06:48:28:55:fb:61:b7:b3: 67:64:5e:0b:7d:17:36:f1:63:75:0d:1e:49:63:97:8d:70:52: 4f:e7:f5:92:ee:21:6d:69:86:37:34:29:79:45:84:94:d3:73: 0f:44:f2:93:6e:b7:43:4f:fa:cf:86:4c:79:25:f9:b8:8a:61: cb:1f:0a:65:3b:bd:9b:26:18:47:e9:56:db:3b:19:bf:10:68: f5:2e:65:87:df:b9:09:a8:21:d2:4c:b3:da:50:b7:37:6e:4d: 68:77:fa:84:93:0d:7e:7d:e1:0c:74:fe:4f:29:5f:88:f2:19: 09:93:99:c0:04:1b:41:5e:87:82:e4:ed:2a:6e:58:f7:50:f6: 0b:71:c0:f8:4d:61:d7:e7:c1:d4:83:f6:96:32:0b:04:92:f7: d2:70:19:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICExUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4RUIxMTAvBgNVBAUTKDA0N0I4QjI5NTRDNDdBQjE1QzU3NTg2REQwMDRFQjg5 Mzk3N0M1QUYwHhcNMjYwMzI0MTY1NTI5WhcNMjYwMzMxMTY1NTI5WjAYMRYwFAYD VQQDEw02OWMyYzIwMi1lMzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7QHO2BFKW4vCwms43BVWlfFKcf4jx0Foc6UM4EC/8wZ4eMqPqkx1HD/gfiR RwlZQVjCrvkGcO/ebTox2GKK2o7kA9ZKDsf+jB2Zz7ZHwHpNlZJIIQaR1/Y/fuH8 xCbwSZQCufN9hP6zjFV1j6a83YwSbj28qdaaEIUwQKqvYx09wSwou64Dvu8vC/tU gJP2MCu1hDUirr+CZu3ppahHkq4dmV1SBtXtyziWuzSAvCNPMGwngkDGmSFC2UOR dK+9gL9fcd2FOcSrzvyypdqJfEfZ451kKw8OVxRZyX92XFadeNFz6TzqlL5tMm1V t4QYhd33T+qYdfk3YMTusmlBGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGDoClQB Zu1cUzEgLUIYUR46qRQ0MB8GA1UdIwQYMBaAFAR7iylUxHqxXFdYbdAE64k5d8Wv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RThFQi9EMDM5RjhENkQx QkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVyRmNWMWh0MEFUcmlUbDN4 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIdUxLVlRFZXJGY1YxaHQwQVRyaVRsM3hhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RThFQi9EMDM5RjhENkQxQkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVy RmNWMWh0MEFUcmlUbDN4YTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA+Y0cMFtnMBGbBN4ddm9+5mrGi+ZjlFzwBin9usad8liL8FheijMKHkqLshL CL2aNwNrBKl9m7Q0G+XBO7gsH5MXCBV1vkEBLI1fe/48MZNhksngWkZez1CWF1nl KrgomoWcpQZIKFX7YbezZ2ReC30XNvFjdQ0eSWOXjXBST+f1ku4hbWmGNzQpeUWE lNNzD0Tyk263Q0/6z4ZMeSX5uIphyx8KZTu9myYYR+lW2zsZvxBo9S5lh9+5Cagh 0kyz2lC3N25NaHf6hJMNfn3hDHT+TylfiPIZCZOZwAQbQV6HguTtKm5Y91D2C3HA +E1h1+fB1IP2ljILBJL30nAZTA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:27:28 2026 by rpki-client